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ABSTRACT 

Proof testing has been a useful supplement to conventional 
nondestructive evaluation (NDE) of space shuttle main engine (SSME) 
components. Since many of these components involve thin sections and 
high toughness materials, such as Inconel 718, conventional single- 
cycle proof test logic is not applicable due to the propensity for 

stable crack growth during the proof test. The purpose of this paper 
is to summarize experience with five-cycle proof testing of SSME 

components and outline a framework for understanding multi-cycle proof 
testing using the fracture mechanics concept of a resistance curve. 
Extreme value statistics are also used to propose an empirical 
approach to compare the advantages and disadvantages of single- versus 
multi-cycle proof testing. The importance of the initial flaw size 

distribution and specimen thickness in such a comparison is also 

discussed . 

1. Introduction 


Although proof testing is generally not the preferred method of 
crack detection, it has proven useful as a supplement to conventional 
nondestructive evaluation (NDE) methods, particularly when NDE is com- 
promised by geometric complexities of the component, or structure. 
The objective of proof testing is to screen out gross manufacturing or 
material deficiencies and therefore provide additional quality 
assurance of delivered hardware. It is in this spirit that Rocketdyne 
has utilized proof testing on components of the Space Shuttle Main 
Engine (SSME). In this case, Rocketdyne has applied a modified 
version of conventional single-cycle proof testing which involves 
multi-cycle testing. Based on demonstrated success on a number of 
propulsion systems over the years, five-cycle proof testing has been 
adopted as the standard. Testing typically occurs prior to service, 
although in special cases it could also be utilized as part of an in- 
service inspection . 
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Potential benefits of proof testing must always be weighed 
against the possibility of inflicting additional undetected damage on 
the component through subcritical crack growth on loading. The 
decision as to whether or not to use proof testing for the purpose of 
flaw screening, as well as the development of an optimum strategy for 
such testing, requires appropriate fracture mechanics analysis. Since 
the application of proof testing to brittle materials results in 
little or no stable crack growth on loading, multi-cycle proof testing 
is unnecessary and the relevant fracture mechanics analysis is 
relatively straightforward. On the other hand, multi-cycle proof 
testing is applicable to tougher materials which often exhibit signif- 
icant stable crack growth on loading and the relevant fracture 
mechanics analysis can be considerably more complex. Although these 
techniques have been outlined [1,2], certain underlying concepts 
remain unproven and the appropriate fracture mechanics material 
properties, needed to characterize the propensity for stable crack 
growth, are generally not available. 

Southwest Research Institute is presently conducting an experi- 
mental research program whose objective is to define the relative 
advantages and disadvantages of single versus multi-cycle proof 
testing [3]- Although experimental' results are not yet available from 
this program, the intent of this paper is to define the problem and 
identify the underlying factors which will control the outcome of such 
a comparison. First, Rocketdyne's experience with five-cycle proof 
testing is briefly summarized, then the strategies of single- and 
multi-cycle proof testing are outlined and discussed within the 
context of the generalized concept of a crack growth resistance 
curve. 

2. Summary of Multi-Cycle Proof Testing Experience 

Multi-cycle proof testing of pressurized components has been 
selectively implemented by Rocketdyne since 1952. It originated as 
the result of components failing at pressures significantly less than 
those used in successful hydrostatic proof testing. The current 
procedure for multi-cycle proof testing on the SSME consists of the 
application of five proof cycles at a minimum pressure of 1.2 times 
the maximum operating pressure, each with a hold time of approximately 
30 seconds. The proof pressure is typically selected to keep nominal 
stresses below 85% of the material's ultimate strength; although this 
stress level is low enough to preclude generalized yielding, localized 
yielding can sometimes occur. 

The primary justification for five-cycle proof testing is the 
successful record of performance of Rocketdyne engines and lack of 
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service failures of pressurized components whenever this procedure has 
been implemented. This experience, summarized in Table 1, includes 
cases where components have passed the first cycle of pressurization 
of a five-cycle proof test only to fail on a subsequent proof pressure 
cycle at or below full pressure. As indicated, many of these cases 
involved components of the SSME where hardware deficiencies, judged to 
present a significant risk of catastrophic failure in service, were 
revealed after having passed the first proof pressure cycle. As one 
might expect, the highest incidence of proof test failures has 
occurred in components with the lowest design margin. 

While not clearly evident from the comments in Table 1, it is 
significant to note that many of the components listed contain 
relatively thin sections. This observation is consistent with a 
propensity for thin sections to exhibit stable crack growth on loading 
as discussed in Section 4 in terms of R-curve behavior. 

3. Single Cycle Proof Testing Strategy 

The philosophy underlying single cycle proof testing has been 
adequately established; for example, see the work of Tiffany [4]. 
Perhaps the most well known example of the successful application of 
proof testing is that of the low temperature testing of the F- 111 wing 
box at McClellan Air Force Base [5]. 

As a prelude to understanding multi-cycle proof testing, let us 
first consider the basic concept of single cycle proof testing of a 
material under brittle conditions. This can best be accomplished by 
examining Figure 1 which illustrates conventional proof testing logic 
in terms of both the residual strength (a p ), as well as residual 
fatigue life (N f ) of a structural component. As indicated, the proof 
test stress (o ) is selected to be some fraction of the material's 
ultimate strength (o ) such that gross deformation of the structure 
is avoided, although local yielding may occur at geometric stress 
concentrations. Since brittle materials exhibit a veil-defined 
instability point given by K max = Kj c , *'* ie success f u l application 
of a guarantees that any flaw that may be present is less than some 
size? a-. Using a^^ as the initial crack size in a fracture mechanics 
based fatigue crack growth analysis defines a corresponding initial 
residual fatigue life, N*. Provided periodic proof testing can 
reliably ensure that the maximum crack size remains below a^, its use 
during service offers the opportunity to extend the life of the 
component. The interval a f - a t defines the crack size regime over 
which periodic proof testing at a will result in crack detection 
through proof failure thereby removing the component from service 
before the critical flaw size, a f , is reached. 
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TABLE 1 


SUMMARY OF ROCKETDYNE 1 S EXPERIENCE WITH FIVE-CYCLE PROOF TESTS 
WHICH FAILED ON OTHER THAN THE FIRST CYCLE (Period: 1973 - 1979) 



Heterlal at Proof Pressure 

Failure Location Failure Cycle at Failure 


High-pressure Fuel 
Duct 


Fool Turfc. Drive Duct Inco 718 


Low Pressure Oxl direr 
Duct Flax Joint 


Ox Id. Tank Pres su rant 
•Short* Sallows 
(2 Incidents) 


Fuel Supply fact 


Flight Nozzle Tubes 


HPfTP Inlet 



SA1-2.5Sn T1 
held HAZ 


3rd- 

(anient) 
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TABLE 1 (CONTINUED) 


SUMMARY OF ROCKETDYNE ' S EXPERIENCE WITH FIVE-CYCLE 
WHICH FAILED ON OTHER THAN THE FIRST CYCLE (Period: 


PROOF TESTS 
1973 - 1979 ) 


Program 

Component 

Material at 
Failure Location 

Failure Cycle 

Proof Pressure 
at Failure 

Nilir 

He lima Bottle 

4130 Bar 
Heat Treat 
180-200 ksl 

See Coments 

See Co— ants 

Thor 

Gas Generator Blade 
Valve Housing 

356-T6 A1 
Casting 

5th 

78t 

Atlas 
HA* 5 

Turbine Inlet 
Nanifold Nut 

300 Sarlas CUES 

3rd 

loot 

M 

Thrust Ch«Rp«r Tubas 

Inconel 

X-750 

3rd 

61 S 

F-l 

MK- 10 Fuel Voluta 
Casting 

Ten* 50-T60 
Casting 

5th 

During De- 
press url zatlci 
firm 100% 

AS* 27 

TurbofHffp Fuel Inlet 
Elbow 

(4 Incidents) 

6061 A1 Wald 

2nd 

loot 










a, crack size (Log Scale) 


a r - Residual Strength 
°ult * Ultimate Strength 
wp ■ Proof Stress 
Of s ■ “Fan-safe" Stress 

Nf * Residual Fatigue Life 

- Residual Fatigue Life 
Corresponding to ai 

a * Instantaneous Crack Size 

a-j * Initial Crack Size Deter- 
minded by Proof Test 

a f ■ Final Crack Size During 
Service (at instability) 

af - a^ * Interval Available for 
In-service Crack 
Detection 


FIGURE 1. 


Single-cycle proof stress 
terms of residual strength 
life. 


logic represented in 
and residual fatigue 



FIGURE 2. 


Influence of R-curve on maximum extent of 
stable crack growth in "Brittle" ( ‘ B ‘ ) 
versus "Ductile" ( * D 1 ) materials. 
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Although the foregoing discussion uses the term "brittle 
material", it is important to recognize that whether or not a material 
exhibits brittle behavior is dependent upon geometric constraint and 
loading rate, as well as test temperature. In fact the temperature 
dependence of the material can be used to advantage in designing the 
proof test. Specifically, for materials in which K Ic /o ys is signi- 
ficantly reduced as temperature is decreased, a p /a y S can be reduced b y 
performing the proof test at a temperature lower than the operating 
temperature. This strategy was used in the case of the F- 111 proof 
testing [5], and more recently in the case of cryogenic proof testing 
of titanium disks in the Air Force's F-100 engines in F-15 and F-16 
fighter aircraft. 

H. Multi-Cycle Proof Testing Strategy and the R-Curve Concept 

There is no advantage to multi-cycle proof testing in materials 
which behave in a brittle fashion since significant stable crack 
growth on loading does not occur. However, multi-cycle proof testing 
appears to offer distinct advantages in materials which behave in 
ductile fashion, as demonstrated by Rocketdyne's experiences which are 
summarized in Section 2. The success of multi-cycle proof testing is 
believed to be due to the occurrence of stable crack growth on 
loading. In general, this phenomenon is dependent on a variety of 
factors-- including stress state, temperature and material condition— 
and can best be understood in terms of resistance curve concepts. 

The general concept of a resistance curve is attributable to 
Krafft [6] and involves an energy balance between the driving force 
for crack growth and the inherent resistance to crack growth of the 
material. Subsequently, McCabe and co-workers (e.g., see Ref. [7]) 
popularized the approach and developed standard methods for measuring 
R-Curves under linear elastic conditions. The approach has also been 
shown to apply to cyclic loading [8,9]; thus, its use is compatible 
with a conventional fracture mechanics approach to fatigue crack 
growth. More recently, the resistance curve concept has been extended 
to fracture under elastic-plastic loading [10,11] using the J-integral 
[12]. The latter has been formalized by Paris and co-workers [13, 1 1 !] 
into the tearing instability approach. Thus, the resistance curve 
concept is applicable to a variety of failure modes and loading 
conditions, including stable crack growth within highly deformed 
regions at geometric stress concentrations [15]. However, for 
simplicity, the following discussion relating resistance curve 
concepts and multi-cycle proof testing is presented within the frame- 
work of linear elastic fracture mechanics. 
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As illustrated in Figure 2, the resistance curve concept can best 
be understood by considering both the driving force (K) and material 
resistance (R)* as functions of the extent of stable crack growth, Aa, 
which occurs during loading. Here the resistance curve, or R-curve, 
is compared for two materials: the brittle material exhibits a 

relatively flat R-curve (Rg), while that for the ductile material (R D ) 
rises steeply as the crack extends. The marked increase in the 

R-curve in the latter case is believed to be associated with the 
formation of shear lips near the surface of the specimen, reflecting 
the influence of a relative change in crack-tip stress state from 

plane strain to plane stress as the specimen surface is approached. 
The dashed lines emanating from a common point are the superimposed 
driving forces for increasing values of applied nominal stress 
through o u . Although stable crack growth can occur when K = R, the 
onset of crack instability does not occur until both: K = R 

and 3K/9a = 3 R/3a. Because of the flatness of the R-curve in the 
case of the brittle material, these conditions can only be met at 
point r, for an applied stress a,. Thus, o is a critical stress, 
designated o B , and provided the extent of prior crack growth (Aa g ) is 
small, this Corresponds to Kj c . In contrast, for the case of ductile 
materials, instability occurs at point s, corresponding to a critical 
stress o°, and toughness K c °. As a consequence of differences m the 
nature of the R-curve, both the toughness and the extent of crack 
extension prior to instability can differ significantly. Moreover, 
contrary to the case of the brittle material, the value of apparent 
toughness for the ductile material is not unique, as will be discussed 

below. 

For example, Figure 3 schematically shows how the character of 
the R-curve changes as a function of specimen (or component) thick- 
ness. Consequently, even for a fixed material, specimen geometry, and 
initial crack size, the toughness is seen to systematically increase 
with decreasing thickness, B. Moreover, altering the planar geometry 
such that the applied K varies, as shown in Figure 4, causes the 
toughness and extent of stable crack growth (Aa 1 versus Aa 2 ) to change 
significantly, even though the material and initial crack size are 
held constant. Finally, even for a constant planar geometry, 
thickness, and material, the apparent toughness (K c ) can vary with 
initial crack size, as a result of crack resistance development during 
stable crack growth as shown in Figure 5. 


* Under linear elastic loading, the materials resistance is also 
commonly referred to as K g , but R will be used here for clarity. 
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FIGURE 3. Influence of component thickness (B) on fracture 
toughness (K c ) and extent of crack growth (Aa) 
for a given material condition and initial crack 
size (a 0 ) . 



FIGURE 4. Influence of component geometry on the fracture 
toughness (K c ) and extent of crack growth (Aa) 
for a given material and initial crack size (a 0 ). 
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FIGURE 5. Influence of initial crack size (a 0 ) on the fracture 
toughness (K c ) and extent of crack growth (Aa) in a 
given material and geometry. 



a* crack size (Log Scale) 



ua * a^2 - ail = uncertainty 
in initial crack size 
needed for fatigue crack 
growth analysis 



a, crack size (Log Scale) 


6 N-f * Uncertainty in residual 
fatigue life 



FIGURE 6. Uncertainty in residual strength and residual 
fatigue life due to stable crack growth on 
loading during the proof test of "ductile" 
materials. 
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Thus, we can summarize the differences between brittle and 
ductile material response as follows: 

a) Brittle Response (Low toughness and thick sections): 

1 . R-Curve : Flat 

2. Stable Crack Growth: little or none 

3. Instability Condition: K = Kj c 

b) Ductile Response (High toughness and thin sections): 

1. R-Curve: Steep 

2. Stable Crack Growth: can be extensive 

3. Instability Condition: K = R and 3K/3a = 3R/3a; 

4. Apparent toughness: = K C (B, a Q , and Geom.) 

It follows from the above conditions that brittle materials have a 
straightforward proof test logic as summarized previously in 
Figure 1. In contrast, the propensity for stable crack growth and 
more complex instability conditions of ductile materials give rise to 
the less certain proof test logic of Figure 6. Here stable crack 
growth on loading (Aa), due to the R-curve effect, produces uncer- 
tainty in the residual strength (6S r ), as well as in the residual 
fatigue life (SN^). 

In theory the above uncertainty can be eliminated through the 
proper application of R-Curve concepts [1], although this has not yet 
been demonstrated quantitatively, nor have the relevant R-curve data 
been generated, especially for surface and embedded defects. 

Based on the above discussion, it is clear that the character of 
the material's resistance curve holds the key to proper selection of 
an optimum proof test strategy. Materials which are either inherently 
tough (Figure 2), or are used in thin sections (Figure 3), are well 
suited for multi-cycle proof testing. Conversely, materials with 
inherently low toughness, or those subjected to high degrees of 
geometric constraint, are well suited for single-cycle proof 

testing. Since Inconel 718, the primary structural material in the 

SSME exhibits high toughness, it is concluded that component thickness 
and flaw geometry are the primary geometric variables controlling the 
selection of an optimum proof test strategy. As mentioned previously, 
this is consistent with Rocketdyne's five-cycle proof testing 
experience (Section 2). 
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5. Key Factors in Comparison of Single Versus Multi-Cycle Proof 

Testing 

A number of factors have been considered to ensure the proper 
design of experiments comparing single versus multi-cycle proof 
testing in Ref. [3]. The R-curve concepts discussed in the previous 
sections provide guidance on the proper selection of variables so that 
results are not unduly biased toward either one of these procedures. 
Specifically, it follows from the influence of thickness on the 
propensity for stable crack growth (Figure 3) that thick specimens 
will favor single-cycle proof testing, while thin specimens will tend 
to favor multi-cycle proof testing. Thus, the experimental design 
being utilized in Ref. [3] provides for a comparison of data at 
various thicknesses which are typical of those used in SSME 
components. 

The distribution of initial crack sizes in the experimental com- 
parison has also been a key consideration. This is particularly true 
at the upper tail of the crack size distribution where the behavior of 
the larger defects will result in the most dramatic differences 
between the two procedures, specifically, where either of the follow- 
ing events will occur: 1) survival of large initial cracks during the 
proof test will cause short fatigue lives, and 2) growth and insta- 
bility of large initial cracks during proof testing will cause their 
removal from the population of fatigue lives. Thus, the experimental 
design in Ref. [1] has been approached as a problem in extreme value 
statistics. This approach is consistent with the philosophy of proof 
testing — that is, to eliminate the unusually large defect which, 
having escaped detection during nondestructive inspection, causes an 
unacceptably low fatigue life. 

In order to ensure that the results are applicable to SSME com- 
ponents, initial flaw size distributions are being derived based on 
data from SSME components, as well as welded IN 718 coupon tests. 
Preliminary results suggest that these initial flaw sizes can be 
represented by either Weibull or lognormal distributions. An initial 
flaw size distribution of this general type is schematically shown in 
Figure 7, where it is compared with anticipated alterations resulting 
from either single- or multi-cycle proof testing. As indicated, the 
single-cycle proof testing may increase the number of large cracks, 
due to stable crack growth, while eliminating a relatively few cracks 
from the entire population. On the other hand, the multi-cycle proof 
testing is expected to increase the size of a greater number of 
cracks, while eliminating the largest cracks from the total popula- 
tion. This anticipated result is schematically illustrated using the 
R-curve in Figure 8 which is assumed to be invariant from cycle-to- 
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FIGURE 7. Schematic illustration of anticipated changes in crack 
size distribution following single and multi-cycle 
proof testing. 



FIGURE 8. Stable crack extension during proof testing illus- 
trating the influence of the number of proof cycles 
on the extent of crack growth (Aa) and the post- 
proof flaw distribution. 
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cycle. As indicated, an initial flaw size, a^ will grow in stable 
fashion on sequential cycles to a 2 > a^, a^, and a^, until the onset of 
instability of a 6 on the sixth cycle. Thus, five-cycle proof tests on 
components containing a distribution of initial flaw sizes between a-| 
and ag will result in failures for all flaws greater than a 2 . These 
eliminated flaw sizes will be replaced by flaws which were initially 
between a-, and a 2 . In contrast, during single-cycle proof testing 
each flaw in this same initial distribution will enlarge by one crack 
growth increment and only flaws greater than ag will be eliminated by 
virtue of their failure. Consequently, fewer large flaws are expected 
to remain following five-cycle proof testing than after single-cycle 
proof testing. 

It is clear that the most significant differences introduced by 
the two types of proof testing will occur in the upper tail of the 
crack size distribution. These differences will translate into the 
lower tails (minimum lives) of the fatigue life distributions. In 
other words, the behavior of the flaws which just barely escape detec- 
tion in either proof test will be critical in controlling the statis- 
tics of the subsequent fatigue tests. Thus, if crack sizes are appor- 
tioned in the experiments either uniformly or even from the entire 
distribution curve, there is a risk of losing valuable information. 
Such dilution is likely to provide little information in the upper 
tail of the crack size distribution and lower tail of the fatigue life 
distribution. Consequently, to avoid such problems, the experiments 
in Ref. [3] are concentrating on the crack sizes in the upper tail of 
the distribution. 

In addition to the statistical soundness of the above approach, 
it is also consistent with the design philosophy of the SSME. The 
SSME was designed for 240 flights, but its anticipated mission use is 
only 55 flights and 5 tests, thus a safety factor of four on life was 
used. In view of this general conservatism, the primary role of proof 
testing of SSME components is to eliminate the atypical, large defects 
which occasionally escape NDE. Since these defects are contained in 
the upper end of the distribution curve, it is appropriate to empha- 
size these extreme values in comparing the two proof test methods. 
This approach will enable several specimen thicknesses to be examined 
without compromising the robustness of the statistical analysis. 

Figure 8 also illustrates that the large differences in the 
extent of crack extension for flaws of different sizes will result in 
a law of diminishing returns. Thus an optimum number of proof cycles 
is expected to occur. However, this optimum number will depend on the 
character of the material's resistance curve, the geometry of the 
component, as well as the initial flaw size distribution. The 
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development of a component-specific optimum proof testing strategy 
will depend on establishing a reliable initial flaw size distribution, 
which may depend on the details of weld fabrication. In addition, in 
order to quantify the previously presented concepts, several technical 
challenges associated with the characterization of stable crack growth 
of surface flaws will need to be addressed. These include both 
experimental and analytical difficulties arising from three- 
dimensional, variable-constraint effects, as well as elastic-plastic 
crack growth. 
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